Walrus - An Android app that lets you use your access contr

项目说明

Walrus

![Build Status]()
![GitHub release]()
![GPLv3 license]()
![Slack invite]()

Intro

Walrus is an Android app for contactless card cloning devices such as the Proxmark3 and Chameleon Mini. Using a simple interface in the style of Google Pay, access control cards can be read into a wallet to be written or emulated later.

Designed for physical security assessors during red team engagements, Walrus supports basic tasks such as card reading, writing and emulation, as well as de functionality such as antenna tuning and device configuration. More ad functionality such as location tagging makes handling multiple targets easy, while bulk reading allows the stealthy capture of multiple cards while “war-walking” a target.

Installing

<a href=" alt="Get it on Google Play" src=" width="160"></a>

Documentation

Documentation and Getting Started. For end-user information such as what Walrus is, and how it can be used in the field, check out the Walrus website!

De

Walrus is de by Daniel Underhay and Matthew Daley (a.k.a. Team Walrus!) and is ![Open Source]()

Building

Walrus is a standard Android Studio project. At this stage there are no unusual dependencies or build steps beyond the usual cloning of the repository and opening the project in Android Studio.

TODO: When we refresh and remove the current Google Maps API key from the repo, we'll need to point out that this needs to be generated and set manually if maps are needed.

Codebase

The current layout of Walrus's source code is as follows:

* /app/src/main

* /assets: Any non-resource assets, like the open source license listing.

* /res: Resource files.

* /java/com/bugfuzz/android/projectwalrus: Actual code lives here!

* /card: Code to do with persistent data (i.e. the wallet). The Card class, the base CardData class and card data type classes, database models and database helpers are here.

* /device: De and de driver code. The important CardDe lives here alongside the base CardDevice class and its child classes for basic kinds of device (serial, line-based, etc.). Code to handle bulk reading is also located here.

* /proxmark3: Proxmark3 driver code.

* /chameleonmini: Surprise! Chameleon Mini driver code.

* /ui: Code to do with other UI.

* /util: Miscellaneous.

Hardware

Team Walrus is powered by Lab401, our official hardware sponsor 🥳 Check out their website for some great deals on hardware!

Device Support

Here’s a table of the current devices / card type pairs we support and in what manner.

Key: R = reading, W = writing, U = upload

| | Proxmark3 Original | Pm3 Evo | Pm3 RDV4 | Pm3 Iceman Fork | Chameleon Mini Rev.G | C.M Re |
|-----------------------|:------------------:|:-------:|:--------:|:---------------:|:--------------------:|:--------------:|
| HID Prox | R / W | R / W | R / W | R / W | - | - |
| ISO14443A - UID | - | - | - | - | R / U | U |
| Mifare Ultralight | - | - | - | - | - | - |
| Mifare Classic 1K | R / W | R / W | R / W | R / W | U | U |
| Mifare Classic 4K | ? | ? | ? | ? | ? | ? |
| Mifare Classic 4B | ? | ? | ? | ? | ? | ? |
| Mifare Classic 7B | ? | ? | ? | ? | ? | ? |
| Mifare DESFire | ? | ? | ? | ? | ? | ? |

Contributing

We welcome all kinds of contributions and bug reports, big or small! De takes place at our GitHub repository. There you can file issues (both bugs and enhancement requests) and submit pull requests.
Feel free to join our Slack channel.

During the initial de of Walrus, changes to the codebase are likely to be frequent and wide-ranging, so if you want to work on a feature, it's wise to reach out first to ensure that your hard work won't be soon obsoleted. After our first full release we hope to gain stability and bring in some of the additional resources expected of a project today, such as a proper test suite and continuous integration.

One area we'd love your help with is contributing translations! If you think you can help us out translating our Android string resources to another language, please get in touch!

项目信息

开发语言：Java

Star 数：494

技术要点

该项目属于红蓝攻防方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕An Android app that lets you use your access control card cloning devices in the field.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。